goes326-goutian-bc[.]pages[.]dev

PhishDestroy identifies goes326-goutian-bc.pages.dev as an active crypto drainer phishing domain designed to trick users into connecting crypto wallets or revealing private keys. This fraudulent page mimics legitimate services to initiate unauthorized token transfers, draining victim assets silently upon wallet connection. Security analysts confirm the threat involves credential theft via fake login prompts that harvest wallet credentials or seed phrases for later exploitation. This domain was flagged by PhishDestroy after being blocked by PhishingDB on a single security blocklist. VirusTotal analysis shows 17 out of 95 detection engines flagged this domain as malicious, indicating it remains under the radar despite its active operation. Registered through Cloudflare, Inc., the site resolves to IP address 188.114.97.3 and uses a Google Trust Services SSL certificate to appear legitimate. The unique seed identifier 073adc confirms this threat is part of a monitored cluster of crypto-draining operations. If you visited goes326-goutian-bc.pages.dev, disconnect your wallet immediately and revoke any unauthorized permissions through your wallet’s connected app dashboard. Do not enter any credentials or crypto wallet information on this page. Scan your device with updated antivirus software and consider rotating all wallet keys if suspicious activities are detected. Report the domain to your wallet provider and relevant security platforms like PhishDestroy or PhishingDB to help block its distribution.